Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowResolved
TBK BANK, SSB
bd_b6e46bd16d6a6961 · schema v1 · pii pii-v1
Full breach record for TBK BANK, SSB →An email compromise incident led to the unauthorized access of names and financial account numbers.
Maine clockDiscovered Dec 6, 2021 → Filed with AG Mar 17, 2022101d ✗ ME AG >90d14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ac84f0a3900ba68aNew Hampshire State AGfiled 2022-03-17Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/88e8e989-e330-49b9-8625-05ceab8602df.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2022
- Raw hash
- 7bfaf7df8b48f7c1ffe9c1087d0a881e417c7eae14bcc4ed4b675deede2e5c9f
Reporting entity
- Name
- TBK BANK, SSBnorm: tbk bank ssb
Victim entity
- Name
- TBK BANK, SSBnorm: tbk bank ssb
Incident
- Discovered
- Dec 6, 2021
- Materiality determined
- —
- Notification sent
- Mar 16, 2022
- Affected individuals
- 3
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 14 weeks(101 days from discovery to filing)
- Compliance flags
- ME AG >90d · 101dME resident >60d · 100d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 6, 2021→ Filed with AG: Mar 17, 2022101d 90 days ME AG >90d Maine Discovered: Dec 6, 2021→ Notified: Mar 16, 2022100d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.